From c482aee3f7f514e49119487004c90523299246b6 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 1 Nov 2026 12:18:37 +0000 Subject: [PATCH] chore(deps): bump the github-actions group with 7 updates Bumps the github-actions group with 7 updates: | Package | From | To | | --- | --- | --- | | [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) | `0960109a4dd6d503321a0abfa87b9768962ddd12` | `57721ba1e64f4a53fe9300b820eeee8398b772fb` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` | | [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact) | `24` | `27` | | [cachix/install-nix-action](https://github.com/cachix/install-nix-action) | `31.11.1` | `31.11.3` | | [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | `7.2.3` | `7.3.0` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `8.0.1` | `8.0.2` | | [docker/login-action](https://github.com/docker/login-action) | `4.6.0` | `4.7.0` | Updates `dependabot/fetch-metadata` from 0960109a4dd6d503321a0abfa87b9768962ddd12 to 57721ba1e64f4a53fe9300b820eeee8398b772fb - [Release notes](https://github.com/dependabot/fetch-metadata/releases) - [Commits](https://github.com/dependabot/fetch-metadata/compare/0960109a4dd6d503321a0abfa87b9768962ddd12...57721ba1e64f4a53fe9300b820eeee8398b772fb) Updates `actions/upload-artifact` from 7.0.1 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9) Updates `dawidd6/action-download-artifact` from 24 to 27 - [Release notes](https://github.com/dawidd6/action-download-artifact/releases) - [Commits](https://github.com/dawidd6/action-download-artifact/compare/d63b86af1b34672e53c440b1b83979861906bad7...eab87c9830c39eff17e5a6eadb20bfb4bc880477) Updates `cachix/install-nix-action` from 31.11.1 to 31.11.3 - [Release notes](https://github.com/cachix/install-nix-action/releases) - [Changelog](https://github.com/cachix/install-nix-action/blob/master/RELEASE.md) - [Commits](https://github.com/cachix/install-nix-action/compare/13d8dd58da0234aa297dedd986986ccb8e7f3e24...75c75c31ebece974e48ebc36b4ad125bd97bd97b) Updates `goreleaser/goreleaser-action` from 7.2.3 to 7.3.0 - [Release notes](https://github.com/goreleaser/goreleaser-action/releases) - [Commits](https://github.com/goreleaser/goreleaser-action/compare/f06c13b6b1a9625abc9e6e439d9c05a8f2190e94...a4f02ab5355a589de60d917a659ce617ed19b3de) Updates `actions/download-artifact` from 8.0.1 to 8.0.2 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c...9000827ccba6bdab643e8b6fd33ac0654aef8333) Updates `docker/login-action` from 4.6.0 to 4.7.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/dbcb813823bdd20940b903addbd779551569679f...81c6f93d4bc991e510b342a00b419b3bb4efc5c6) --- updated-dependencies: - dependency-name: dependabot/fetch-metadata dependency-version: 57721ba1e64f4a53fe9300b820eeee8398b772fb dependency-type: direct:production dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: dawidd6/action-download-artifact dependency-version: '27' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: cachix/install-nix-action dependency-version: 31.11.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: goreleaser/goreleaser-action dependency-version: 7.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/download-artifact dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: docker/login-action dependency-version: 4.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/dependabot-automerge.yml | 2 +- .github/workflows/go.yml | 26 +++++++++++----------- .github/workflows/nightly.yml | 2 +- .github/workflows/publish-nix-cache.yml | 2 +- 4 files changed, 16 insertions(+), 16 deletions(-) diff --git a/.github/workflows/dependabot-automerge.yml b/.github/workflows/dependabot-automerge.yml index e427c1a93..f18f993e8 100644 --- a/.github/workflows/dependabot-automerge.yml +++ b/.github/workflows/dependabot-automerge.yml @@ -13,7 +13,7 @@ jobs: steps: - name: Fetch dependabot metadata id: metadata - uses: dependabot/fetch-metadata@0960109a4dd6d503321a0abfa87b9768962ddd12 # v3 + uses: dependabot/fetch-metadata@57721ba1e64f4a53fe9300b820eeee8398b772fb # v3 with: github-token: "${{ secrets.GITHUB_TOKEN }}" diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml index 568ecd7a9..08df909b1 100644 --- a/.github/workflows/go.yml +++ b/.github/workflows/go.yml @@ -53,7 +53,7 @@ jobs: working-directory: src - name: Upload coverage report - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7 with: name: coverage-${{ steps.branch.outputs.name }} path: src/coverage.txt @@ -77,7 +77,7 @@ jobs: - name: Download merge-base coverage if: github.ref != 'refs/heads/main' && !startsWith(github.ref, 'refs/tags/v') && steps.merge-base-run.outputs.run_id != '' - uses: dawidd6/action-download-artifact@d63b86af1b34672e53c440b1b83979861906bad7 # v24 + uses: dawidd6/action-download-artifact@eab87c9830c39eff17e5a6eadb20bfb4bc880477 # v27 with: workflow: go.yml run_id: ${{ steps.merge-base-run.outputs.run_id }} @@ -157,7 +157,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Install Nix - uses: cachix/install-nix-action@13d8dd58da0234aa297dedd986986ccb8e7f3e24 # v31 + uses: cachix/install-nix-action@75c75c31ebece974e48ebc36b4ad125bd97bd97b # v31 with: nix_path: nixpkgs=channel:nixos-unstable @@ -443,7 +443,7 @@ jobs: working-directory: src - name: Install GoReleaser Pro - uses: goreleaser/goreleaser-action@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 # v7 + uses: goreleaser/goreleaser-action@a4f02ab5355a589de60d917a659ce617ed19b3de # v7 with: distribution: goreleaser-pro install-only: true @@ -515,7 +515,7 @@ jobs: working-directory: src\dist\windows - name: Upload dist-win folder - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7 with: name: dist-win path: src/dist @@ -541,7 +541,7 @@ jobs: # working-directory: src - name: Run GoReleaser (macOS) - uses: goreleaser/goreleaser-action@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 # v7 + uses: goreleaser/goreleaser-action@a4f02ab5355a589de60d917a659ce617ed19b3de # v7 with: distribution: goreleaser-pro # either 'goreleaser' (default) or 'goreleaser-pro' # version: latest @@ -559,7 +559,7 @@ jobs: MACOS_NOTARIZATION_APP_PW: ${{ secrets.MACOS_NOTARIZATION_APP_PW }} - name: Upload dist-mac folder - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7 with: name: dist-mac path: src/dist @@ -582,7 +582,7 @@ jobs: fi - name: Upload macOS notarization submissions - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7 with: name: macos-notarization-submissions path: src/dist/**/*.notary.json @@ -605,16 +605,16 @@ jobs: fetch-depth: 0 # for release notes - name: Install Nix (for nix-prefetch-url) - uses: cachix/install-nix-action@13d8dd58da0234aa297dedd986986ccb8e7f3e24 # v31 + uses: cachix/install-nix-action@75c75c31ebece974e48ebc36b4ad125bd97bd97b # v31 - name: Download dist-mac folder - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: name: dist-mac path: src/dist - name: Download dist-win folder - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: name: dist-win path: src/dist @@ -629,7 +629,7 @@ jobs: cache-dependency-path: src/go.sum - name: Run GoReleaser - uses: goreleaser/goreleaser-action@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 # v7 + uses: goreleaser/goreleaser-action@a4f02ab5355a589de60d917a659ce617ed19b3de # v7 with: distribution: goreleaser-pro # either 'goreleaser' (default) or 'goreleaser-pro' # version: latest @@ -656,7 +656,7 @@ jobs: uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4 - name: Log in to Docker Hub - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4 + uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml index aa766474b..c0e084806 100644 --- a/.github/workflows/nightly.yml +++ b/.github/workflows/nightly.yml @@ -74,7 +74,7 @@ jobs: go-version-file: src/go.mod cache-dependency-path: src/go.sum # Execute goreleaser nightly run (see .goreleaser.yml nightly for details) - - uses: goreleaser/goreleaser-action@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 # v7 + - uses: goreleaser/goreleaser-action@a4f02ab5355a589de60d917a659ce617ed19b3de # v7 if: steps.check.outputs.changed == 'true' with: distribution: goreleaser-pro diff --git a/.github/workflows/publish-nix-cache.yml b/.github/workflows/publish-nix-cache.yml index ab23ab523..f905cf00b 100644 --- a/.github/workflows/publish-nix-cache.yml +++ b/.github/workflows/publish-nix-cache.yml @@ -36,7 +36,7 @@ jobs: persist-credentials: false # this job never pushes back to the repo - name: Install Nix - uses: cachix/install-nix-action@13d8dd58da0234aa297dedd986986ccb8e7f3e24 # v31 + uses: cachix/install-nix-action@75c75c31ebece974e48ebc36b4ad125bd97bd97b # v31 with: nix_path: nixpkgs=channel:nixos-unstable